diff options
author | Star Rauchenberger <fefferburbia@gmail.com> | 2022-12-10 12:32:44 -0500 |
---|---|---|
committer | Star Rauchenberger <fefferburbia@gmail.com> | 2022-12-10 12:32:44 -0500 |
commit | 230ab3079fd4e16ebaa593f6cc5fdbcbad3c2321 (patch) | |
tree | b61b7d4c706de43361da73cce0d2a2a006a89b18 /config/initializers/content_security_policy.rb | |
parent | dc7253d0b71f25c2e9a4547d414fa18390b74fbf (diff) | |
download | thoughts-230ab3079fd4e16ebaa593f6cc5fdbcbad3c2321.tar.gz thoughts-230ab3079fd4e16ebaa593f6cc5fdbcbad3c2321.tar.bz2 thoughts-230ab3079fd4e16ebaa593f6cc5fdbcbad3c2321.zip |
Installed LINGO scoreboard
Diffstat (limited to 'config/initializers/content_security_policy.rb')
-rw-r--r-- | config/initializers/content_security_policy.rb | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/config/initializers/content_security_policy.rb b/config/initializers/content_security_policy.rb new file mode 100644 index 0000000..54f47cf --- /dev/null +++ b/config/initializers/content_security_policy.rb | |||
@@ -0,0 +1,25 @@ | |||
1 | # Be sure to restart your server when you modify this file. | ||
2 | |||
3 | # Define an application-wide content security policy. | ||
4 | # See the Securing Rails Applications Guide for more information: | ||
5 | # https://guides.rubyonrails.org/security.html#content-security-policy-header | ||
6 | |||
7 | # Rails.application.configure do | ||
8 | # config.content_security_policy do |policy| | ||
9 | # policy.default_src :self, :https | ||
10 | # policy.font_src :self, :https, :data | ||
11 | # policy.img_src :self, :https, :data | ||
12 | # policy.object_src :none | ||
13 | # policy.script_src :self, :https | ||
14 | # policy.style_src :self, :https | ||
15 | # # Specify URI for violation reports | ||
16 | # # policy.report_uri "/csp-violation-report-endpoint" | ||
17 | # end | ||
18 | # | ||
19 | # # Generate session nonces for permitted importmap and inline scripts | ||
20 | # config.content_security_policy_nonce_generator = ->(request) { request.session.id.to_s } | ||
21 | # config.content_security_policy_nonce_directives = %w(script-src) | ||
22 | # | ||
23 | # # Report violations without enforcing the policy. | ||
24 | # # config.content_security_policy_report_only = true | ||
25 | # end | ||